Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.
Main features
* Complete integrity check
+ uses cryptographic checksums of files to detect
modifications,
+ can find rogue SUID executables anywhere on disk, and
* Centralized monitoring
+ native support for logging to a central server via encrypted
and authenticated connections
* Tamper resistance
+ database and configuration files can be signed
+ logfile entries and e-mail reports are signed
+ support for stealth operation
Homepage: http://la-samhna.de/samhain/index.html
|
|
|
| Architecture | Package Size | Installed Size | Files |
|---|---|---|---|
| amd64 | 853.6 kB | 2068 kB | [list of files] |
| armel | 850.8 kB | 2060 kB | [list of files] |
| hppa | 865.8 kB | 2080 kB | [list of files] |
| i386 | 824.1 kB | 1972 kB | [list of files] |
| ia64 | 908.6 kB | 2376 kB | [list of files] |
| mips | 855.0 kB | 2160 kB | [list of files] |
| mipsel | 854.1 kB | 2160 kB | [list of files] |
| powerpc | 851.6 kB | 2100 kB | [list of files] |
| s390 | 843.9 kB | 2076 kB | [list of files] |
| sparc | 846.6 kB | 2060 kB | [list of files] |